WO2004012029A2 - Restriction de l'acces a un procede dans un composant - Google Patents

Restriction de l'acces a un procede dans un composant

Info

Publication number
WO2004012029A2
WO2004012029A2 PCT/IN2003/000249 IN0300249W WO2004012029A2 WO 2004012029 A2 WO2004012029 A2 WO 2004012029A2 IN 0300249 W IN0300249 W IN 0300249W WO 2004012029 A2 WO2004012029 A2 WO 2004012029A2
Authority
WO
WIPO (PCT)
Prior art keywords
component
methods
key
list
access
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/IN2003/000249
Other languages
English (en)
Other versions
WO2004012029A3 (fr
Inventor
Sasank Kotnur
Sreekrishna Kotnur
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
OBJECT INTERACTIVE TECHNOLOGIES Ltd
Original Assignee
OBJECT INTERACTIVE TECHNOLOGIES Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by OBJECT INTERACTIVE TECHNOLOGIES Ltd filed Critical OBJECT INTERACTIVE TECHNOLOGIES Ltd
Priority to AU2003272075A priority Critical patent/AU2003272075A1/en
Publication of WO2004012029A2 publication Critical patent/WO2004012029A2/fr
Anticipated expiration legal-status Critical
Publication of WO2004012029A3 publication Critical patent/WO2004012029A3/fr
Ceased legal-status Critical Current

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00—Arrangements for program control, e.g. control units
    • G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/46—Multiprogramming arrangements
    • G06F9/468—Specific access rights for resources, e.g. using capability register
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
    • G06F21/629—Protecting access to data via a platform, e.g. using keys or access control rules to features or functions of an application
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2147—Locking files

Definitions

  • This invention relates generally to computer programming, and more particularly to component based development of computer software.
  • Component based development generally involves writing or developing small components, where each small component does specific work, and integrating the small components with other small components to form large components or to form an application.
  • Component based development is prevalent in distributed computing environments where information is shared in, generally, heterogeneous computer networks. For example, many mission-critical computer software applications utilize distributed computing environments to share information.
  • distributed computing environment different components may perform different tasks and the different components may be disbursed over the distributed computing environment. Because the components may be disbursed and located remotely from each other, it may be difficult to control the components.
  • a problem with distributed computing environments is that quite often a component may behave unpredictably.
  • One cause of such unpredictable behavior oftentimes is that certain methods of the component may create unpredictable behavior.
  • An embodiment of the present invention provides a process and system for restricting access to a method in a distributed computing environment.
  • An embodiment of the invention includes maintaining a list of methods in the distributed commuting environment. Further, the process and system restrict access to a method in the distributed computing environment by generating a key that specifies that the method is blocked and deleting the key when the method is not blocked.
  • An exemplary embodiment includes capability to perform configuration of the system.
  • FIG. 1 is a block diagram illustrating the functional blocks of an exemplary embodiment of the invention.
  • FIG. 1A illustrates an alternative embodiment of a block diagram of the functional blocks.
  • FIG. 2 illustrates a flow diagram of configuration in accordance with one embodiment of the present invention.
  • FIG. 3 illustrates a flow diagram of initialization in accordance with one embodiment of the present invention.
  • FIG, 4 illustrates a flow diagram of placing a block on a method in a publisher component in accordance with one embodiment of the present invention.
  • FIG. 5 illustrates a flow diagram of removing a block on a method in a publisher component with respect to more than one subscriber component in accordance with one embodiment of the present invention
  • FIG. 6 illustrates a flow diagram of removing a block on a plurality of methods in a publisher component with respect to a specific subscriber component in accordance with one embodiment of the present invention.
  • FIG. 7 illustrates a flow diagram of an alternative embodiment of the present invention where removing a block is based upon a time duration.
  • FIG. 8 illustrates a flow diagram whereby an application maintains status of methods in accordance with one embodiment of the present invention.
  • FIG. 9 illustrates a flow diagram of an alternative embodiment of the present invention where a dynamic method container is unavailable.
  • FIG. 10 illustrates a flow diagram of a deactivation counter in accordance with an embodiment of the present invention.
  • FIG. 1 depicts a block diagram of an exemplary embodiment of a distributed computing environment 100 which may be used to restrict access to (also referred to as "block") a method in a component from being accessed by another component calling the restricted method.
  • the term "method” refers to a software process or procedure that is executed and may, generally, be synonymous with terms, including procedure, function, and routine.
  • the term “component” refers to an object that may have more than one associated method. For example, a method named “TextColor” may function to set color attributes of displayed textual information and "TextColor” may be associated with a component named “GraphicalDisplay Attributes” that has a number of associated methods which perform functions relating to a graphical display.
  • FIG. 1 Shown in FIG. 1 is a distributed computing environment 100 that includes a method control 105, a dynamic method container 110, a method store 115, a deactivation counter 117, an application 120, a publisher component 125, and a subscriber component 130.
  • the method control 105, the dynamic method container 110, the deactivation counter 117 and the method store 115 are located on the same computer, e.g. Computing System A.
  • the application 120, the publisher component 125, and the subscriber component 130 are all located on separate computing systems, e.g. Computing Systems D, C, and F, respectively.
  • FIG. 1 Shown alternate embodiment as shown in FIG.
  • the method control 105, the dynamic method container 1 10 and the deactivation counter 117 are located on the same computer and the method store 115 is located on a different computer.
  • the deactivation counter 117 is contained with the method control 105, whereas in an alternative embodiment, the deactivation counter 1 17 is separate from the method control 105.
  • the placement of the method control 105, the dynamic method container 110, the method store 115, the deactivation counter 117, the application 120, the publisher component 125, and the subscriber component 130 on various computing systems in the distributed computing environment 100 is illustrative and variations of the placement of the method control 105, the dynamic method container 110, the method store 115, the deactivation counter 117, the application 120, the publisher component 125, and the subscriber component 130 will not further be discussed.
  • An exemplary embodiment of the present invention uses the JAVA programming language and environment. Implementation of an embodiment of the present invention is not restricted to JAVA, as an embodiment of the present invention may be applied to any other programming language by one skilled in the art of programming. Further, implementation of an embodiment of the present invention may be realized by embedded systems programming, e.g. by the use of an application programmer's interface ("API"), such. as J2ME, to implement a microprocessor based system.
  • API application programmer's interface
  • An embodiment of the present invention assumes that a programmer has developed components utilizing conventional programming practices and has compiled the components using generally available compiling tools. Having compiled components, an embodiment of the invention functions to restrict access to a method while an application 120 is executing or as is known in the art, at "runtime.”
  • subscriber component is used to refer to a component which calls on the methods of another component.
  • subscriber component 130 may use the methods of the publisher component 125.
  • publisher component is used to refer to a component that provides at least one method.
  • publisher component 125 may provide methods to various components, including subscriber component 130, in the distributed computing environment 100.
  • the method control 105 functions as a controller to manage access of methods in the distributed computing environment 100. Further/ the method control 105 functions as an interface to the application 120 whereby the method control 105 communicates restrictions regarding the methods in the distributed computing environment 100 to the application 120. The method control 105 may also manage access to the subscriber components and publisher components in the distributed computing environment 100, In an exemplary embodiment/ the dynamic method container 110 functions as a data structure. At runtime, the dynamic method container 110 holds information, termed a "key," regarding restricted methods of the publisher component 125, The information includes, for example, a method name, a publisher component name, any subscriber component names and a release time for each subscriber component, if specified. The dynamic method container 110 provides this information to the method control 105 when the application 120 seeks access to a method in the distributed computing environment 100.
  • the method store 115 functions to store the methods of the publisher component 125.
  • the method control 105 and the method store 115 are located on the same computer system, efficiencies in managing access to the methods of the publisher component 125 may be obtained. For example, time spent querying the publisher component 125 is minimized because the method control 105 does not have to query the publisher component 125 each time the application 120 requests access to a method of the publisher component 125.
  • the method control 105 simply retrieves the methods from the method store 115. Further, communication latency between computing systems in the distributed computing environment may be decreased each time the application 120 requests access to a method of the publisher component 125.
  • the method store 115 also functions as a consistent copy of the dynamic method container 110. In such an embodiment, if the method store 115 is unable, the dynamic method container 1 0 performs the functions of the method store 115.
  • the deactivation counter 117 tracks the methods that need to be released within a specific time-frame, e.g. in the next few minutes, where the term released refers to removing access restrictions on the tracked method.
  • the deactivation counter 117 maintains a list of methods that may need to be released after a specified time duration and constantly checks the time to release each of the methods on the list. If a method is to be released, the deactivation counter 117 prompts the method control 105 to remove access restrictions on the released method.
  • the deactivation counter 117 generates a thread for every method to be released.
  • the deactivation counter 117 may be configured to either generate multiple threads for every method to be released or to generate multiple threads for every method to be released.
  • Shown in FIG. 1 is a subscriber component 130 that calls upon methods in the publisher component 125 where the publisher component 125 is registered with the application 120.
  • a plurality of subscriber components may call upon methods in a plurality of publisher components where each publisher component is also registered with the application 120.
  • Shown in FIG. 1A is an example of an embodiment where the plurality of subscriber components 130,150, 155 are located on separate computing systems and call upon methods in a plurality of publisher components 125,135,140,145 where the publisher components are also located on separate computing systems.
  • an exemplary embodiment of the invention restricts access to a method in a component from being accessed by another component calling the restricted method by (a) maintaining a list of methods in the distributed programming environment 100, (b) restricting access to a method in the list of methods in the distributed programming environment 100 by generating a key which specifies that the method is blocked, and (c) deleting the key when the method is not blocked.
  • An exemplary embodiment of the present invention may further include the step of configuring data structures.
  • An exemplary embodiment of the present invention may further include the step of maintaining a status of the methods of a component.
  • the step of maintaining a list of methods in the distributed programming environment 100 functions to provide notice to the application 120 of the methods available by the publisher components.
  • the function of maintaining a list of methods is provided by a persistent storage object, e.g. the method store 115 shown in FIGs. 1 and 1 A.
  • the function of maintaining a list of methods may also be provided by dynamic storage object, such as the dynamic method container 110 shown in FIGs. 1 and 1 A.
  • the function of restricting access to a method may be provided by a processor which manages access to a method in the distributed programming environment 100, such as the method control 110 shown in FIGs. 1 and 1A.
  • the step of deleting the key when the method is not blocked functions to remove restrictions regarding access to the method.
  • the function of deleting the key may be provided by a processor which allows access to a method in the distributed programming environment 100, such as the method control 110 shown in FIGs. 1 and 1 A.
  • the invention further includes the step of configuring data structures.
  • the step of configuring data structures functions to enable the invention to be customizable and configurable. Such a step may be performed before run-time, at the beginning of run-time, or at any time that the application 120 desires to perform custom configuration of data structures.
  • the step of maintaining status of the methods of a component functions to enable an application to determine the accessibility to requested methods and requires that a process periodically update the list of methods so that the list of methods provides an accurate indication of blocked methods in the distributed computing environment 100.
  • the step of configuring data structures may include a configuration utility whereby configuration parameters regarding operation of an embodiment of the present invention is accomplished.
  • the configuration utility may allow the application 120 to set configuration parameters including a trigger time, default block duration, event notification, log notification/ response time, and poll value.
  • the trigger time is a time when the method control 105 parses the dynamic method container 110 to determine whether blocked methods are to be released;
  • the default block duration is a default time that a method is blocked when a method does not have a specified block duration;
  • event notification is a binary value which when set requires the method control 105 to notify the application 120 before a blocked method 120 is to be released;
  • log notification is a binary value which when set logs events;
  • response time specifies a specific period of time to wait for a response from the application 120 after notifying the application 120 of a release event; and
  • a poll value specifies the frequency at which the deactivation counter 117 checks the system time to release blocked methods.
  • the application 120 sets the trigger time 200.
  • the application 120 sets the default block duration 205.
  • the application then may set event notification 210, Notifying the application 120 of a release event before it occurs enables the application 120 to decide whether or not to extend the duration of the blocked method.
  • the application may then set log notification 215. Setting log notification keeps a history of events such as the application 120 requesting a blocked method, release event of a blocked method, and setting of configuration parameters.
  • the application 120 sets the response time 220. If the application 120 does not respond within the response time, the method control 105 releases the blocked method. Then the application 120 may set a Poll Value 225.
  • the Poll Value is preset to an initial value, e.g. 30 microseconds.
  • Configuration concludes when the application 120 sends 230 the configuration information to the method control 105.
  • the method control 105 receives and reads the configuration information 235 received from the application 120. Based upon the received configuration information, the method control 105 generates a configuration key 240 and stores the key 245 in the method store 115.
  • the configuration key 240 serves as security against alterations to the method control 105 and is needed whenever changes to the method control 105 are made.
  • an exemplary embodiment of the present invention includes a startup sequence whereby startup begins by the application 120 calling upon 300 the method control 105.
  • the method control 105 parses 305 the method store 115 and retrieves the blocked methods 310.
  • the method control 105 retrieves the configuration key 315 from the method store 115.
  • the method control 105 loads 320 the dynamic method container 110 and inserts the blocked methods 325 in the dynamic method container 110.
  • the method control 105 extracts the configuration key from the method store 115. Based upon the details of the configuration key, the method control 105 initializes the default block duration value 335, the trigger time value 340, the event notification value 345, the response time value 350, and the poll value 355.
  • the method control 105 On successful startup 360 the method control 105 notifies 365 the application 120 of the successful startup. In an alternative embodiment of the present invention, if initialization of the method control 105 fails, then notification of the failed initialization is communicated to a user. In yet another alternative embodiment, if initialization of the method control 105 fails, then notification of the failed initialization is communicated to the application 120 via an appropriate exception. In an exemplary embodiment, if the method control 105 initializes and the method store 115 is unable, then an alternate method store may be provided and the method control 105 may retrieve the list of methods from the alternate method store. The alternate method store may be a copy of the method store 1 5 and may be located on a fault tolerant computing system in the distributed computing system. If the configuration key is not found from either the method store 115 or the alternate method store, then the method control 105 may begin with a default configuration which may be preset in an embodiment of the invention.
  • the application 120 may handle errors received from the method control 105 by performing actions including restarting the application 120, handling the error via appropriate error handling software, and spooling until the method control 105 is able to handle requests from the application 120.
  • any number of error handling derivatives may be accommodated by the application 120 and will not be further discussed.
  • Shown in FIG. 4 is an example of a subscriber component being restricted from accessing a blocked method.
  • the application 120 calls 400 the method control 105 to list methods in the distributed computing environment 100.
  • the method control 105 then retrieves the list of methods 405 from the method store 115 and returns the list of methods 410 to the application 120,
  • the application 120 selects a method to be blocked 420 from the list of methods.
  • the application selects a subscriber component 425 and sets the duration for restricting access to the blocked method by the subscriber component 430.
  • an exemplary embodiment of restricting access by specific subscriber components from a method of a publisher component is performed by executing the following object:
  • a publisher component named "PubOne/' has a method "addQ” blocked from being accessed by subscriber components named "SubOne,” “SubTwo,” and “SubThree” for specific durations to be released at the times specified. For example, subscriber component “SubOne” will be released from the restriction to accessing "addQ" at a time 12:45:45.
  • an exemplary embodiment of restricting access by a plurality of subscriber components from a method of a publisher component is performed by executing the following object: PubTwo.muf().(18:30:00)
  • a publisher component named "PubTwo” has blocked its method "mulQ" from being accessed by any subscriber component requesting access to the method. Access to the method is blocked for a specific duration and is scheduled to be released at a time 18:30:00.
  • a method can be blocked from being accessed by a plurality of subscriber components including all the subscriber components in the . distributed computing environment.
  • an exemplary embodiment of restricting access by a subscriber component from a method of a publisher component for two specific durations is performed by executing the following object: PubOne.add().SubOne.(12:45:45).(18:00:QO)
  • a publisher component named "PubOne” has blocked its method “addQ” from being accessed by subscriber component “SubOne” at multiple instances of time.
  • the above object allows the method "addQ” to be released at a first instance of time of 12:45:45 and at a second instance of time 18:00:00.
  • the method control only needs to include the release duration(s)]
  • blocking access to the method "addQ” may be performed at any time after the block is released, e.g. 12:45:45 in the above example. By specifying a block for multiple times, regeneration of the key is not necessary.
  • a specific subscriber component may be blocked from accessing a method without having to explicitly specify the duration of the block 435.
  • a block is performed without having to specify a start time.
  • the application 120 transfers information regarding the block to the method control 105 where the information includes the publisher component name, name of the method to be blocked, the subscriber component names and the release time for each of the subscriber components of the block 445 to the method control 105,
  • the method control 105 processes the information 450 specified and generates 455 a method key.
  • the method key encapsulates the information regarding the blocked method.
  • the method control 105 when a plurality of components are chosen to be restricted from accessing a plurality of methods of a component, the method control 105 generates a separate method key for each blocked method.
  • the method control 105 stores the method keys 460 in the dynamic method container 110 and updates the method store 115 with the method keys 465. In an exemplary embodiment, on successfully storing the method key in the dynamic method container 110 and the method store 1 15, the method control 105 returns a message 470 to the application 120 indicating that the assigned task of blocking has been performed successfully.
  • releasing a blocked method is similar to placing a restriction on a method to be blocked.
  • the application 120 initially requests a list of blocked methods from the method control 500.
  • the method control parses 505 the dynamic method container 110 to retrieve 510 the list of blocked methods.
  • the method control 105 then sends the list of the blocked methods 515 to the application 120.
  • the application 120 selects the method 520, which is to be released and the request is sent 525 to the method control 105 to release the selected method.
  • the method control 105 parses 535 the dynamic method container 110, extracts the method key of the selected method 540, and deletes 545 the method key of the selected method from the dynamic method container 110.
  • the method control 105 then parses 550 the method store 115 and deletes the method key of the selected method 555 from the method store 115. Deleting the method key of the selected method from the method store 115 deletes information in the method key of the selected method and results in releasing the block on the selected method with respect to every instance of a subscriber component calling the selected method.
  • the method control subsequently returns a message 560 to the application 120 on successful completion of releasing the blocked method.
  • a plurality of blocked methods are released with respect to subscriber components. Illustrated in FIG. 6 is an exemplary flow diagram to remove restrictions on a subscriber component when the subscriber component is restricted from accessing a plurality of methods of a publisher component.
  • the application 120 may remove restrictions on a plurality of subscriber components that are restricted from accessing a plurality of methods of a publisher component. In either case, the application 120 requests the method control 105 to display 600 the list of methods that are blocked with respect to a subscriber component and the method control 105 parses 605 the dynamic method container 110 to search 610 for methods that are blocked from being accessed by the subscriber component.
  • the application 120 selects the subscriber component 625 to be released and selects the methods that need to be released for the selected subscriber component 630, 635.
  • the application 120 sends the release details 640 to the method control 105.
  • the method control 105 reads the details 645 received from the application 120, parses 650 the dynamic method container 110, and extracts the method keys 655 of the methods which are to be released with respect to the selected subscriber component.
  • the method control 105 then deletes method keys 660,665 of the subscriber component of the selected methods.
  • the method control 105 parses 670 the method store 115 and deletes the method keys 675 of the subscriber component, e.g. 'sub I/ in the method store 115.
  • the method control 105 on completion of this task informs 680 the application 120 of the successful completion of the task of releasing the restrictions on a subscriber component from accessing methods of the publisher component To remove restrictions relating to a plurality of subscriber components, the method control 105 deletes method keys with respect to each subscriber component requiring access to the blocked methods.
  • the method control 105 is configured to release one or a plurality of blocked methods in a publisher component at expiration of a block time for one or a plurality of methods with respect to a subscriber component.
  • the method control 105 is configured to release one or a plurality of blocked methods in a publisher component at expiration of a block time for one or a plurality of methods with respect to a plurality of subscriber components.
  • the method control 105 parses 705 the dynamic method container 110 and extracts the method keys 710 from the dynamic method container 10 and reads a duration parameter in the method keys to identify 715 which methods and what time each method is scheduled for release.
  • the method control 105 prepares a list of methods that will be released shortly, e.g. within a time frame of five minutes, and notifies 720 the application 120.
  • the method control 105 receives a confirmation 725 from the application 120 and releases 730 the selected method or a plurality of selected methods.
  • the release sequence is as described in FIG. 6.
  • the application 120 restricts a subscriber component from accessing a method in a publisher component depending on whether the method has been blocked with respect the subscriber component. If the application 120 does not restrict a subscriber component from accessing a method in a publisher component/ then the application 120 allows access to the method in the publisher component with respect to the unrestricted subscriber component. In an alternate embodiment, the application 120 restricts a subscriber component from accessing a plurality of methods in a publisher component, depending on whether such methods have been blocked with respect to such subscriber components. If the application 120 does not restrict the subscriber component from accessing the plurality of methods in the publisher component, then the application 120 allows access to the methods in the component with respect to the unrestricted subscriber components.
  • a subscriber component 130 requests 800 the application 120 for access to a method.
  • the application 120 queries 805 the method control 105 to determine whether the subscriber component 130 can access the requested method.
  • the method control 105 then parses 810 the dynamic method container 110 to check access restrictions on the requested method, which is requested by the subscriber component 130.
  • the method control may determine that the requesting subscriber component 130 is blocked from access by the requested method and may subsequently notify the application 120 that the requesting subscriber component is blocked from accessing the requested method. Notifying is performed by returning a status 820 (e.g. whether the requested method is blocked for the requesting subscriber component or if the method is blocked for all subscriber components) to the application 120.
  • a status 820 e.g. whether the requested method is blocked for the requesting subscriber component or if the method is blocked for all subscriber components
  • the application 120 if the status is that the requested method is blocked, the application 120 will not process the request of the subscriber component as the method is blocked from being used. If the application 120 is notified that the method being requested is currently blocked, then the application 120 returns a message to the subscriber component calling the blocked method.
  • the application 120 queries 835 the method control 105 to determine whether the requesting subscriber component 130 can access the requested method.
  • the Method control parses the dynamic method container 840 to determine whether the requesting subscriber component has access to the requested method. The determination is termed a "status" and information is sent to the application 120 by the method control 850. If the requesting subscriber component has access to the requested method, the application processes the request. If the application 120 is notified that the method being requested is currently blocked form being used, then the application returns a message to the subscriber component requesting the blocked method.
  • the method control 105 may still be able to process requests from the application 120. If the method control is unable to contact 910 the dynamic method container 1 10 to check the details of the access restrictions on the requested method, the method control 105 retrieves details 915 of access restrictions on the requested method from the method store 115. The method control 105 retrieves status information regarding access to the requested method from the method store 115 and the method control 105 sends the status information 925 to the application 120. In turn, the application 120 sends the status information to the requesting subscriber component 130.
  • Alternate embodiments of the invention include a plurality of dynamic method containers where the dynamic method containers may be remotely located and distributed on heterogeneous computing environments.
  • the method control 105 sends details of the methods 1000 that need to be released before the next trigger time to the deactivation counter 117.
  • the deactivation counter receives 1005 the Method Details and parses it 1010.
  • the deactivation counter calculates the Time to Live 1015 for the Blockage, the Time to Poll 1020, and the Event Notification Time 1025, It then generates a thread to contain all the details of the various methods to be released 1030 and changes the state of the thread from active to sleep 1035.
  • the deactivation counter generates another thread 1040 and sets the thread to notify 1045 the method control before the release of the blocked method.
  • the deactivation counter then updates the method control 1050.

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • General Health & Medical Sciences (AREA)
  • Computer Hardware Design (AREA)
  • Computer Security & Cryptography (AREA)
  • Health & Medical Sciences (AREA)
  • Bioethics (AREA)
  • Storage Device Security (AREA)
  • Multi Processors (AREA)

Abstract

Un mode de réalisation de la présente invention concerne un procédé et un système permettant de restreindre l'accès à un procédé dans un environnement de calcul distribué. Un autre mode de réalisation a trait au maintien d'une liste de procédés dans l'environnement de commutation distribué. En outre, le procédé et le système permettent de restreindre l'accès à un procédé dans l'environnement de calcul distribué par génération d'une clé qui spécifie que le procédé est bloqué, et d'effacer la clé, lorsque le procédé n'est pas bloqué. Un mode de réalisation exemplaire comprend la capacité de réaliser la configuration du système.
PCT/IN2003/000249 2002-07-30 2003-07-21 Restriction de l'acces a un procede dans un composant Ceased WO2004012029A2 (fr)

Priority Applications (1)

Application Number Priority Date Filing Date Title
AU2003272075A AU2003272075A1 (en) 2002-07-30 2003-07-21 Restricting access to a method in a component

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US10/208,329 US20040025007A1 (en) 2002-07-30 2002-07-30 Restricting access to a method in a component
US10/208,329 2002-07-30

Publications (2)

Publication Number Publication Date
WO2004012029A2 true WO2004012029A2 (fr) 2004-02-05
WO2004012029A3 WO2004012029A3 (fr) 2007-11-22

Family

ID=31186798

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/IN2003/000249 Ceased WO2004012029A2 (fr) 2002-07-30 2003-07-21 Restriction de l'acces a un procede dans un composant

Country Status (3)

Country Link
US (1) US20040025007A1 (fr)
AU (1) AU2003272075A1 (fr)
WO (1) WO2004012029A2 (fr)

Families Citing this family (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
GB2499189B (en) * 2012-01-31 2014-02-12 Broadcom Corp Method and apparatus for informing UE about access barring
US10791097B2 (en) 2016-04-14 2020-09-29 Sophos Limited Portable encryption format
US10686827B2 (en) 2016-04-14 2020-06-16 Sophos Limited Intermediate encryption for exposed content
US10650154B2 (en) 2016-02-12 2020-05-12 Sophos Limited Process-level control of encrypted content
US10681078B2 (en) 2016-06-10 2020-06-09 Sophos Limited Key throttling to mitigate unauthorized file access
US9984248B2 (en) 2016-02-12 2018-05-29 Sophos Limited Behavioral-based control of access to encrypted content by a process
US10263966B2 (en) 2016-04-14 2019-04-16 Sophos Limited Perimeter enforcement of encryption rules
US10628597B2 (en) 2016-04-14 2020-04-21 Sophos Limited Just-in-time encryption
GB2551983B (en) 2016-06-30 2020-03-04 Sophos Ltd Perimeter encryption

Family Cites Families (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6282652B1 (en) * 1998-02-26 2001-08-28 Sun Microsystems, Inc. System for separately designating security requirements for methods invoked on a computer
US6125402A (en) * 1997-06-16 2000-09-26 Sun Microsystems, Inc. Method and system for executing one of several forms of a multi-purpose program
US6487665B1 (en) * 1998-11-30 2002-11-26 Microsoft Corporation Object security boundaries
US20030131347A1 (en) * 2001-10-12 2003-07-10 Allison David S. Method and apparatus for runtime binding of object members
US7441264B2 (en) * 2002-06-24 2008-10-21 International Business Machines Corporation Security objects controlling access to resources
US7356836B2 (en) * 2002-06-28 2008-04-08 Microsoft Corporation User controls for a computer

Also Published As

Publication number Publication date
AU2003272075A8 (en) 2004-02-16
WO2004012029A3 (fr) 2007-11-22
US20040025007A1 (en) 2004-02-05
AU2003272075A1 (en) 2004-02-16

Similar Documents

Publication Publication Date Title
US7386859B2 (en) Method and system for effective management of client and server processes
US7426735B2 (en) Threading and communication architecture for a graphical user interface
EP0425420A2 (fr) ProcÀ©dé et dispositif pour traiter des objets persistants dans un système de programmation orienté objet
US20090234957A1 (en) Managing database connections
US20110231852A1 (en) Method and system for scheduling media exports
US20020162049A1 (en) Method for correcting a program running on computer system
CN111913851A (zh) 进程监控方法、系统、终端及存储介质
EP0747832A2 (fr) Système et procédé de contrÔle d'information des clients dans un environnement de traitement parallèle avec couplage lâche
CN113342554B (zh) Io多路复用方法、介质、设备和操作系统
US7552446B1 (en) Methods and apparatus for a timer event service infrastructure
JPH08272725A (ja) 分散オブジェクト環境においてサーバの構成情報を判定し、操作するためのシステム、及び方法
JP4056491B2 (ja) 論理的に区画化されたコンピュータにおける区画管理操作に関する非同期通知の選択的生成
JPH1063523A (ja) マルチスレッド環境においてサーバの活動化を制御する方法および装置
CN113986502A (zh) 线程池管理方法、装置、计算机终端及存储介质
US20040025007A1 (en) Restricting access to a method in a component
US20070192334A1 (en) System and Method for Heterogeneous Caching
US7275250B1 (en) Method and apparatus for correlating events
JP2000259585A (ja) システムアプリケーション管理方式とその管理方式を実行するためのプログラムを記録した記録媒体
KR19990087928A (ko) 작업종료통지를제공하기위한방법및장치
KR20100108578A (ko) 컴퓨팅 장치 셧다운 방법, 컴퓨팅 장치 및 컴퓨터 판독가능 저장 매체
EP0747812A2 (fr) Système et méthode CICS avec des fonctions API pour démarrer et annuler des transactions dans un environnement de traitement parallèle à couplage lâche
US6826761B1 (en) Efficient timer management system
GB2456201A (en) Notification of a background processing event in an enterprise resource planning system
US20050081216A1 (en) Method, system, and program for calling a target object from a caller object
US20030212736A1 (en) System and method for activating and pausing a component

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A2

Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BY BZ CA CH CN CO CR CU CZ DE DK DM DZ EC EE ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NO NZ OM PH PL PT RO RU SC SD SE SG SK SL TJ TM TN TR TT TZ UA UG UZ VC VN YU ZA ZM ZW

AL Designated countries for regional patents

Kind code of ref document: A2

Designated state(s): GH GM KE LS MW MZ SD SL SZ TZ UG ZM ZW AM AZ BY KG KZ MD RU TJ TM AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IT LU MC NL PT RO SE SI SK TR BF BJ CF CG CI CM GA GN GQ GW ML MR NE SN TD TG

121 Ep: the epo has been informed by wipo that ep was designated in this application
122 Ep: pct application non-entry in european phase
NENP Non-entry into the national phase

Ref country code: JP

WWW Wipo information: withdrawn in national office

Country of ref document: JP